CVE-2006-4601

CVE-2006-4601 describes a SQL injection vulnerability in the PHP script index.php of the product Annuaire 1Two 2.2 . The flaw allows remote attackers to execute arbitrary SQL commands by supplying a malicious value for the parameter id . The NVD entry assigns a base score of 7.5 ( HIGH ) with net...

CVE-2005-1975

The CVE-2005-1975 entry concerns multiple cross-site scripting (XSS) vulnerabilities in Annuaire 1Two 1.1 and earlier. The affected components are the index.php script (id parameter) and commentaires.php (site_id, nom, email, commentaire parameters). Exploitation would allow remote attackers to i...